https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:45:13 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-14562 <p>The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers&#39; order and attachment data.</p> <p>The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers&#39; order and attachment data.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-14562 https://vulnerability.circl.lu/vuln/ghsa-qgf7-8crm-3896 <p>The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers&#39; order and attachment data.</p> <p>The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers&#39; order and attachment data.</p> https://vulnerability.circl.lu/vuln/ghsa-qgf7-8crm-3896